Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/d0943051-2307-3480-8ecf-b5eb942d40fa.roa
File:                     d0943051-2307-3480-8ecf-b5eb942d40fa.roa (raw, json)
Hash identifier:          uYnyUFnvrCSp+fWldaj8ho84ixw4aJCCzd4M1lL8rCE=
Subject key identifier:   69:29:FB:72:DC:E5:64:DD:D0:B2:F3:88:2F:86:31:9C:B5:D4:0F:1E
Certificate issuer:       /CN=9e246efa-84c5-416a-bc6c-a7163432845f
Certificate serial:       010D0C9F4328584060068A971B1151D2160A0FF0
Authority key identifier: 6B:E9:1F:52:86:51:E2:D9:F9:B4:5B:F1:F1:8F:72:43:69:85:0A:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/d0943051-2307-3480-8ecf-b5eb942d40fa.roa
Signing time:             Wed 21 Dec 2022 15:46:01 +0000
ROA not before:           Wed 21 Dec 2022 15:46:01 +0000
ROA not after:            Tue 25 Mar 2025 04:00:00 +0000
asID:                     43350
IP address blocks:        64.93.95.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 30 Dec 2022 14:09:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:60:06:8a:97:1b:11:51:d2:16:0a:0f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e246efa-84c5-416a-bc6c-a7163432845f
        Validity
            Not Before: Dec 21 15:46:01 2022 GMT
            Not After : Mar 25 04:00:00 2025 GMT
        Subject: CN=d78fa2b5-62a3-4765-bc20-f56eb50d0e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f5:99:12:02:8a:58:8b:0e:a3:34:61:8d:5e:
                    ac:3d:70:87:b4:f3:c2:de:e3:d6:27:cf:14:73:3d:
                    0f:92:01:7a:d4:ae:7d:00:ee:8b:a9:51:5e:4e:97:
                    cd:a4:da:b6:fc:75:7d:4b:0f:3f:37:94:1d:de:ab:
                    5f:a5:4a:27:70:c6:85:4f:2c:47:6d:90:f1:14:ef:
                    af:7f:ed:21:97:31:5c:8c:08:d4:64:8e:8a:0f:21:
                    7a:e6:42:3c:e7:4d:e1:dc:56:ce:c4:c5:79:08:aa:
                    7f:5d:01:a5:04:8c:5f:77:83:1c:da:98:0a:bf:7a:
                    72:38:71:3b:0b:0e:6f:95:f9:3d:f2:13:67:4d:f5:
                    71:98:55:49:33:b7:2f:7c:63:9b:48:df:d8:e6:05:
                    06:fd:38:81:09:98:3f:07:2d:cb:c3:d9:bd:20:05:
                    f5:d7:b9:ee:39:f8:f2:b0:39:9d:db:fe:c7:5e:3d:
                    96:f9:8b:31:e2:bf:64:3c:9d:1f:a5:4b:bc:ba:e9:
                    21:ce:de:b2:60:99:6e:e6:3a:0d:7d:f0:db:ea:77:
                    73:ef:f9:64:f5:09:9f:66:07:cf:4f:38:7f:e0:93:
                    5f:75:f6:fc:6c:87:15:5a:64:24:10:d4:20:6e:97:
                    d0:e4:89:73:40:4f:59:cd:76:ce:52:d3:7d:e5:ff:
                    d9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:29:FB:72:DC:E5:64:DD:D0:B2:F3:88:2F:86:31:9C:B5:D4:0F:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/d0943051-2307-3480-8ecf-b5eb942d40fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/9e246efa-84c5-416a-bc6c-a7163432845f.crl

            X509v3 Authority Key Identifier:
                keyid:6B:E9:1F:52:86:51:E2:D9:F9:B4:5B:F1:F1:8F:72:43:69:85:0A:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.93.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f4:89:8b:79:2c:cd:61:80:f3:52:87:35:49:39:48:bf:68:
         d2:43:e7:61:37:54:ad:55:fb:f2:2d:4f:8a:59:5a:17:a1:40:
         df:c4:ca:1d:1e:07:98:10:e1:2e:37:4a:5b:78:a6:10:48:bc:
         38:b3:11:31:f7:97:e2:00:07:7a:1b:6a:62:c1:2a:81:ae:75:
         2a:cf:75:20:82:3b:50:23:c4:ff:5d:69:b5:30:83:ca:21:c1:
         1c:e7:f5:11:fd:1a:fd:06:f1:b8:75:ab:28:3d:52:6a:62:4d:
         23:45:cc:fc:f4:b6:6e:cf:1f:35:63:09:f6:c0:4b:71:9e:bc:
         0f:67:dc:a9:2b:a1:75:67:e5:14:59:ed:1a:b7:fb:eb:02:a9:
         6f:5c:17:23:ac:a9:f9:dd:c4:cb:d6:1a:3a:7b:57:b6:6b:38:
         4f:1f:a0:20:e5:5d:c0:5b:09:5e:71:39:81:a5:5d:ef:a4:b1:
         84:3d:9a:fb:ec:1d:06:3a:ea:d1:06:5c:ab:eb:1f:b9:71:12:
         12:9d:a3:2e:8c:ec:cb:b9:82:d0:d4:5f:91:1c:b3:27:fe:21:
         66:5e:93:03:53:80:eb:a5:57:94:74:f8:80:b7:6d:4f:3a:ee:
         eb:b0:fc:7b:ed:40:31:39:72:63:2b:27:af:26:f8:f5:e9:cd:
         02:a6:88:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----